Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa
File:                     3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa (raw, json)
Hash identifier:          KVe6qW3pRE+aU2YnS4sRU3NSF4nu+p/WXuyndl4xHWg=
Subject key identifier:   E6:60:05:61:56:29:3E:91:DA:77:4D:BC:BE:06:C7:C3:00:2D:7E:65
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       2FE203BD85B1F49E0287641FA7B96FF54B40CC43
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:04 +0000
ROA not before:           Tue 07 Feb 2023 19:55:04 +0000
ROA not after:            Tue 06 Feb 2024 20:00:04 +0000
asID:                     262741
IP address blocks:        186.208.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:03:bd:85:b1:f4:9e:02:87:64:1f:a7:b9:6f:f5:4b:40:cc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:04 2023 GMT
            Not After : Feb  6 20:00:04 2024 GMT
        Subject: CN=E660056156293E91DA774DBCBE06C7C3002D7E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:37:94:e8:06:e9:79:ee:69:32:f3:73:5d:
                    64:81:af:81:54:4f:f2:8a:34:29:0b:d2:b0:b7:32:
                    9c:22:24:4a:9d:08:4d:f2:07:3a:6f:51:a8:e2:b9:
                    4f:54:ba:61:db:12:61:38:88:82:2f:16:25:23:e5:
                    c2:5c:52:48:63:3b:70:15:09:d2:a1:db:8f:9c:5b:
                    8b:75:66:a1:14:79:43:96:d0:fc:4f:44:b2:a1:f1:
                    69:72:38:86:05:09:66:09:33:0a:07:6f:31:44:e4:
                    52:3d:90:f6:10:91:1f:83:64:e9:f4:12:2c:17:12:
                    19:84:93:4d:00:f8:30:2f:05:97:40:d9:99:75:be:
                    cd:52:86:37:4d:4a:67:d2:6b:ae:4c:07:bd:04:b6:
                    17:1c:cd:fa:6a:56:08:fc:d8:c7:5b:3a:20:74:8d:
                    3c:f3:2a:fe:06:1e:71:28:f7:ea:bd:15:a0:14:a4:
                    9d:b6:77:5c:1d:a2:9b:4a:60:2b:25:21:b5:ae:7a:
                    7a:b6:da:2b:7e:b9:9b:03:4a:3e:f8:f0:cc:c6:ac:
                    ae:2f:1c:08:37:75:d5:32:29:e4:07:a9:3b:74:13:
                    d4:48:8d:76:ba:9f:53:f4:36:66:a7:3e:71:97:1c:
                    87:5e:58:65:19:c1:d8:4a:5c:3e:26:bf:6f:12:e6:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:60:05:61:56:29:3E:91:DA:77:4D:BC:BE:06:C7:C3:00:2D:7E:65
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:af:82:da:ca:2f:06:dd:56:b3:9b:27:4c:97:47:a2:76:
         c3:96:cc:97:7f:34:05:2d:29:d1:11:f1:34:3d:17:c4:69:87:
         ea:0f:c5:f5:e3:66:a0:9e:b2:d5:87:48:e8:23:78:b8:23:a7:
         b7:8c:12:2c:01:e9:e6:24:9b:df:1a:c9:f1:67:15:b7:b6:98:
         65:70:56:a6:f8:6d:75:b6:fb:1f:15:e2:ae:20:61:f9:ea:47:
         80:ef:bd:f3:00:87:94:d6:14:97:99:cd:2a:56:05:59:95:a1:
         90:f6:e0:fa:e1:d8:ed:63:25:4d:da:bd:02:aa:2f:4a:a4:82:
         67:59:ad:b8:cd:02:e0:08:3e:fa:5d:1e:90:c6:76:c8:6c:25:
         49:93:d0:f6:37:58:f8:17:41:9c:61:4c:07:3a:a4:77:a2:d0:
         b4:47:97:82:42:ae:12:a7:3d:23:cd:8e:7b:13:33:81:c7:0e:
         f5:b0:fd:94:0b:0b:80:0e:59:a4:a5:72:a3:79:ae:1e:1b:3c:
         42:73:41:94:f7:65:eb:98:fb:10:53:30:e7:90:17:ab:a1:60:
         e0:5e:a8:0a:e6:1f:ba:c6:4a:01:b1:60:6b:23:ef:ac:7f:43:
         83:4d:59:a5:37:a3:b3:7c:be:55:64:e3:42:e2:27:ab:66:af:
         c5:36:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net